Secure Electronic Device with Execute-Only Memory for IoT IP Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure domain technologies, such as TPM and TrustZone, do not provide effective content protection for executable codes, especially in low-cost IoT devices with limited computational resources, making it difficult for multiple trustworthy developers to collaborate without compromising their intellectual property.
Innovation Solution
A secure electronic device with a first core processing unit configured into secure and normal environments, utilizing bi-directional verification and asymmetrical cryptography for authentication, and execute-only memory to protect executable codes, along with a code transfer device for secure code transfer and management, ensuring that only authorized access is granted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If virtualization technology is used to provide content protection in the non-secure domain, then content protection capability is improved, but device complexity and resource consumption increase making it unsuitable for low-cost products
Solution Approach 1:
The patent introduces an execute-only memory (XOM) as an intermediary layer between the secure domain and the content to be protected. This XOM acts as a mediator that allows the secure domain to execute protected content without requiring complex virtualization infrastructure. The content is loaded into XOM which enforces read-only and execute permissions, providing content protection through a simple memory attribute mechanism rather than complex software virtualization.
Solution Approach 2:
The patent extracts the content protection functionality from the complex virtualization environment and implements it directly in hardware through execute-only memory attributes. By taking out the essential protection mechanism (read-execute separation) from the bulky virtualization framework, the solution achieves content protection with minimal computational overhead and memory requirements, making it suitable for low-cost IoT devices.
2Adaptability or versatility
If multiple developers access the secure world to store their codes, then collaboration capability is improved, but intellectual property security deteriorates without content protection
Solution Approach 1:
The patent segments the secure memory space into multiple isolated execute-only memory regions, each assigned to a specific developer or application. Each developer's content is loaded into a dedicated XOM region with unique access controls. This segmentation allows multiple developers to simultaneously access the secure world for collaboration while their intellectual property remains isolated and protected in separate memory segments that cannot be accessed by other developers.
Solution Approach 2:
The patent applies different memory attributes and access permissions to different regions of the secure memory space. Each developer's code region is configured with specific local qualities (read-only, execute-only permissions) that differ from other regions. This local quality differentiation enables fine-grained access control where each developer can access only their designated region, maintaining IP security while allowing collaboration in the broader secure environment.
3Reliability
If the core processing unit is configured into secure and normal environments using hardware slicing, then security isolation is improved, but access flexibility deteriorates as instructions and data cannot be directly accessed between environments
Solution Approach 1:
The patent introduces execute-only memory as an intermediary that bridges the secure and normal environments. The XOM resides in the secure environment but can be selectively accessed by the normal environment through controlled interfaces. This intermediary mechanism maintains strict security isolation between the two environments while providing controlled access flexibility when needed, allowing the normal environment to interact with specific secure resources without compromising overall security.
Solution Approach 2:
The patent implements dynamic switching between security isolation modes and access modes. The core processing unit can dynamically reconfigure memory attributes and access permissions based on operational requirements. When security isolation is prioritized, strict separation is enforced; when collaboration or data transfer is needed, the system dynamically enables controlled access through the XOM interface, providing flexibility without permanently compromising security.
Data Source
AI summary
A secure electronic device is disclosed. The secure electronic device includes a first core processing unit, a secure boot Read-Only Memory, a first non-volatile memory, a first volatile memory and a first communication interface. A new framework based on the secure electronic device with built-in security is able to safeguard intellectual property for the developers and further improves the security of the secure electronic device. Thus, more developers can launch their programs or services without being stolen or tampered by an unauthorized party.